CyberRota Analysis
AI-GeneratedThe vulnerability exists in the hawtio-operator, which improperly allows namespace edit users to leverage its permissions to set arbitrary externally-routable hostnames in the Route specification without proper validation or authorization. This flaw can lead to subdomain takeover and potential OAuth redirect hijacking, posing a risk to the integrity of applications relying on these routes. Organizations using hawtio-operator should prioritize remediation to prevent unauthorized access and potential exploitation of their network resources.
Original NVD Description
A flaw was found in hawtio-operator. The operator holds routes/custom-host:create permission cluster-wide and writes the tenant-supplied spec.routeHostName value from the Hawtio custom resource directly into the Route spec without validation or authorization checks. A namespace edit user, who normally cannot set custom Route hostnames, can use the operator as a confused deputy to claim arbitrary externally-routable hostnames, enabling subdomain takeover and, in combination with the auto-grant OAuthClient, OAuth redirect hijack.